Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
File:                     3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa (raw, json)
Hash identifier:          ejI55oWvqc5ngWqNNsjlSG8ev9LQU9KrsdWfXwx13Us=
Subject key identifier:   C6:C1:D7:11:0C:C2:CF:B4:94:6B:97:25:F2:A7:32:36:E7:24:F5:2E
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       1BF4D27E3DFEC3574F36734C7CA9483ABFCEAC41
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:33 +0000
ROA not before:           Sun 30 Jul 2023 23:59:33 +0000
ROA not after:            Mon 29 Jul 2024 00:04:33 +0000
asID:                     4800
IP address blocks:        123.231.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Jun 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f4:d2:7e:3d:fe:c3:57:4f:36:73:4c:7c:a9:48:3a:bf:ce:ac:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:33 2023 GMT
            Not After : Jul 29 00:04:33 2024 GMT
        Subject: CN=C6C1D7110CC2CFB4946B9725F2A73236E724F52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:da:26:25:d4:1d:e0:8a:c0:f3:e5:6a:2c:
                    74:5e:7f:15:5e:ef:ae:65:c8:ad:84:4a:91:51:27:
                    1f:ca:d3:51:17:24:16:89:3a:3e:27:cb:73:0b:5d:
                    fd:9d:a9:03:55:62:49:43:59:ae:40:73:63:2c:70:
                    0f:62:ce:30:10:b1:46:c7:0d:11:e3:4e:2e:1f:69:
                    46:22:89:c0:5c:3d:d4:fa:6f:11:b5:1e:c5:f0:d9:
                    35:64:ac:5a:60:9c:f4:e1:c2:5b:62:3d:39:3d:e7:
                    85:7e:db:07:8b:2c:a7:cb:32:89:6b:30:4f:48:31:
                    f7:ce:64:12:6f:7f:45:03:89:40:00:e3:7e:ac:1a:
                    6a:1d:d8:42:27:70:4f:1f:56:37:4c:3b:b6:08:82:
                    99:7c:16:e0:0b:f2:ec:2a:9d:97:4b:d1:4d:aa:76:
                    82:c3:08:72:ff:1e:a4:a1:90:30:fe:89:7f:00:a1:
                    5f:3d:64:9e:65:91:19:41:30:3e:d8:d6:97:a7:ba:
                    95:66:44:78:eb:62:a4:f6:bf:f7:9c:71:64:25:77:
                    ad:f9:8e:f7:07:df:43:7a:73:a6:7b:5f:7f:7c:40:
                    be:ec:e5:b1:43:a1:d3:0e:8c:9b:db:5b:c9:08:35:
                    f6:64:5f:50:b4:e2:e8:b3:6e:36:c1:1f:1d:5d:02:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C1:D7:11:0C:C2:CF:B4:94:6B:97:25:F2:A7:32:36:E7:24:F5:2E
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         33:c9:42:d7:be:6c:00:c1:62:70:df:16:bd:17:e8:08:c9:96:
         d6:46:23:5a:c9:60:e3:25:12:fd:8c:89:0e:8f:33:7d:0f:fb:
         fd:f1:67:b3:36:63:b4:2e:eb:bb:16:4f:e6:42:ad:74:7c:3d:
         10:30:c9:da:96:b2:36:eb:ee:39:44:f4:63:6d:80:5e:fe:02:
         f7:88:23:02:f2:bc:68:16:8f:5a:6f:0e:ec:71:20:7d:bd:98:
         ca:6a:0e:98:b3:e5:ef:27:e3:be:01:aa:f4:fd:c3:66:aa:12:
         38:33:69:28:23:a1:05:e1:aa:89:02:36:d1:72:e4:c6:13:74:
         db:d3:79:0b:2f:b7:9e:72:ef:fd:85:9b:93:52:8b:e6:5c:d5:
         f1:7b:bc:9a:56:5b:a6:92:bb:d5:d4:91:88:2e:85:eb:c9:e1:
         a3:45:f0:7b:50:86:0c:80:c9:ee:8e:96:a7:30:c8:30:25:07:
         17:58:54:4f:ac:ba:7c:17:d2:99:95:9c:fa:e2:3c:f5:03:a5:
         1b:84:c0:c2:c8:06:80:48:38:0b:30:d6:8b:09:a3:fe:8a:42:
         2c:27:ff:0c:eb:a8:51:3e:02:07:84:0b:3f:44:27:b7:5e:23:
         2b:74:c5:63:2f:d7:16:b6:b3:65:ce:2c:fd:84:a9:c0:b4:35:
         84:9e:fa:6d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUG/TSfj3+w1dPNnNMfKlIOr/OrEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yMzA3MzAyMzU5MzNaFw0yNDA3MjkwMDA0MzNaMDMxMTAvBgNV
BAMTKEM2QzFENzExMENDMkNGQjQ5NDZCOTcyNUYyQTczMjM2RTcyNEY1MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM79omJdQd4IrA8+VqLHRefxVe
765lyK2ESpFRJx/K01EXJBaJOj4ny3MLXf2dqQNVYklDWa5Ac2MscA9izjAQsUbH
DRHjTi4faUYiicBcPdT6bxG1HsXw2TVkrFpgnPThwltiPTk954V+2weLLKfLMolr
ME9IMffOZBJvf0UDiUAA436sGmod2EIncE8fVjdMO7YIgpl8FuAL8uwqnZdL0U2q
doLDCHL/HqShkDD+iX8AoV89ZJ5lkRlBMD7Y1penupVmRHjrYqT2v/eccWQld635
jvcH30N6c6Z7X398QL7s5bFDodMOjJvbW8kINfZkX1C04uizbjbBHx1dAoBhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxsHXEQzCz7SUa5cl8qcyNuck9S4wHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzIzMzJlMzIzMzMxMmUzMTMyMzgyZTMwMmYz
MTM3MmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3vngDANBgkqhkiG
9w0BAQsFAAOCAQEAM8lC175sAMFicN8WvRfoCMmW1kYjWslg4yUS/YyJDo8zfQ/7
/fFnszZjtC7ruxZP5kKtdHw9EDDJ2payNuvuOUT0Y22AXv4C94gjAvK8aBaPWm8O
7HEgfb2YymoOmLPl7yfjvgGq9P3DZqoSODNpKCOhBeGqiQI20XLkxhN029N5Cy+3
nnLv/YWbk1KL5lzV8Xu8mlZbppK71dSRiC6F68nho0Xwe1CGDIDJ7o6WpzDIMCUH
F1hUT6y6fBfSmZWc+uI89QOlG4TAwsgGgEg4CzDWiwmj/opCLCf/DOuoUT4CB4QL
P0Qnt14jK3TFYy/XFrazZc4s/YSpwLQ1hJ76bQ==
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:12:40 2024 by rpki-client on console-fra.rpki-client.org